← Back to Skills Marketplace
pvoo

ClickUp MCP

by pvoo · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
3834
Downloads
4
Stars
21
Active Installs
1
Versions
Install in OpenClaw
/install clickup-mcp
Description
Manage ClickUp tasks, docs, time tracking, comments, chat, and search via official MCP. OAuth authentication required.
README (SKILL.md)

ClickUp MCP (Official)

Access ClickUp via the official MCP server. Full workspace search, task management, time tracking, comments, chat, and docs.

Setup

Option 1: Direct OAuth (Supported Clients Only)

ClickUp MCP only allows OAuth from allowlisted clients:

  • Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, ChatGPT
# Claude Code
claude mcp add clickup --transport http https://mcp.clickup.com/mcp
# Then /mcp in session to authorize

Option 2: Claude Code → mcporter (Recommended)

Use Claude Code to OAuth, then extract token for mcporter:

Step 1: Authorize via Claude Code

claude mcp add clickup --transport http https://mcp.clickup.com/mcp
claude
# In Claude Code, run: /mcp
# Complete OAuth in browser

Step 2: Extract token

jq -r '.mcpOAuth | to_entries | .[] | select(.key | startswith("clickup")) | .value.accessToken' ~/.claude/.credentials.json

Step 3: Add to environment

# Add to ~/.clawdbot/.env
CLICKUP_TOKEN=eyJhbGciOiJkaXIi...

Step 4: Configure mcporter

Add to config/mcporter.json:

{
  "mcpServers": {
    "clickup": {
      "baseUrl": "https://mcp.clickup.com/mcp",
      "description": "Official ClickUp MCP",
      "headers": {
        "Authorization": "Bearer ${CLICKUP_TOKEN}"
      }
    }
  }
}

Step 5: Test

mcporter list clickup
mcporter call 'clickup.clickup_search(keywords: "test", count: 3)'

Token Refresh

Tokens are long-lived (~10 years). If expired:

  1. Re-run /mcp in Claude Code
  2. Re-extract token from ~/.claude/.credentials.json
  3. Update CLICKUP_TOKEN in .env

Available Tools (32)

Search

Tool Description
clickup_search Universal search across tasks, docs, dashboards, chat, files

Tasks

Tool Description
clickup_create_task Create task with name, description, status, assignees, due date, priority
clickup_get_task Get task details (with optional subtasks)
clickup_update_task Update any task field
clickup_attach_task_file Attach file to task (URL or base64)
clickup_add_tag_to_task Add tag to task
clickup_remove_tag_from_task Remove tag from task

Comments

Tool Description
clickup_get_task_comments Get all comments on task
clickup_create_task_comment Add comment (supports @mentions)

Time Tracking

Tool Description
clickup_start_time_tracking Start timer on task
clickup_stop_time_tracking Stop active timer
clickup_add_time_entry Log time manually
clickup_get_task_time_entries Get time entries for task
clickup_get_current_time_entry Check active timer

Workspace & Hierarchy

Tool Description
clickup_get_workspace_hierarchy Get full structure (Spaces, Folders, Lists)
clickup_create_list Create list in Space
clickup_create_list_in_folder Create list in Folder
clickup_get_list Get list details
clickup_update_list Update list settings
clickup_create_folder Create folder in Space
clickup_get_folder Get folder details
clickup_update_folder Update folder settings

Members

Tool Description
clickup_get_workspace_members List all workspace members
clickup_find_member_by_name Find member by name/email
clickup_resolve_assignees Get user IDs from names

Chat

Tool Description
clickup_get_chat_channels List all Chat channels
clickup_send_chat_message Send message to channel

Docs

Tool Description
clickup_create_document Create new Doc
clickup_list_document_pages Get Doc structure
clickup_get_document_pages Get page content
clickup_create_document_page Add page to Doc
clickup_update_document_page Edit page content

Usage Examples

Search Workspace

mcporter call 'clickup.clickup_search(
  keywords: "Q4 marketing",
  count: 10
)'

Create Task

mcporter call 'clickup.clickup_create_task(
  name: "Review PR #42",
  list_id: "901506994423",
  description: "Check the new feature",
  status: "to do"
)'

Update Task

mcporter call 'clickup.clickup_update_task(
  task_id: "abc123",
  status: "in progress"
)'

Add Comment

mcporter call 'clickup.clickup_create_task_comment(
  task_id: "abc123",
  comment_text: "@Mark can you review this?"
)'

Time Tracking

# Start timer
mcporter call 'clickup.clickup_start_time_tracking(
  task_id: "abc123",
  description: "Working on feature"
)'

# Stop timer
mcporter call 'clickup.clickup_stop_time_tracking()'

# Log time manually (duration in ms, e.g., 2h = 7200000)
mcporter call 'clickup.clickup_add_time_entry(
  task_id: "abc123",
  start: "2026-01-06 10:00",
  duration: "2h",
  description: "Code review"
)'

Get Workspace Structure

mcporter call 'clickup.clickup_get_workspace_hierarchy(limit: 10)'

Chat

# List channels
mcporter call 'clickup.clickup_get_chat_channels()'

# Send message
mcporter call 'clickup.clickup_send_chat_message(
  channel_id: "channel-123",
  content: "Team standup in 5 minutes!"
)'

Limitations

  • No delete operations — Safety measure; use ClickUp UI
  • No custom fields — Not exposed in official MCP
  • No views management — Not available
  • OAuth required — Must use allowlisted client (Claude Code workaround available)
  • Rate limits — Same as ClickUp API (~100 req/min)

Resources

Usage Guidance
Before installing or using this skill: (1) Verify the skill's source and trustworthiness — the registry metadata mismatches the SKILL.md. (2) Do NOT extract tokens from other applications' credential stores unless you fully control and trust that environment; extracting from ~/.claude/.credentials.json exposes another client's secrets and is a red flag. (3) If you must use this connector, create a ClickUp OAuth token specifically for this integration (with the minimal scopes needed), store it securely (use a secrets manager rather than a long-lived plain-text ~/.env file), and rotate it after testing. (4) Confirm how mcporter is obtained and verify its integrity before installation. (5) Ask the publisher to correct the registry metadata to list required binaries and env vars explicitly, provide provenance for mcporter, and remove any directions that instruct harvesting credentials from other apps. If you cannot verify provenance or are uncomfortable with token extraction instructions, do not install or run this skill.
Capability Analysis
Type: OpenClaw Skill Name: clickup-mcp Version: 1.0.0 The skill bundle is designed to integrate with ClickUp via its official MCP server. It requires the `mcporter` binary and a `CLICKUP_TOKEN` environment variable. The `SKILL.md` provides clear setup instructions for the user, including how to extract an OAuth token from `~/.claude/.credentials.json` using `jq` for local configuration. This `jq` command, while accessing a sensitive file, is presented as a user-executed setup step to obtain a token for their environment, not as an instruction for the AI agent to perform unauthorized access or exfiltration. All network interactions are directed to the legitimate ClickUp MCP domain (`https://mcp.clickup.com/mcp`), and the available tools align with the stated purpose of managing ClickUp resources. There is no evidence of malicious execution, data exfiltration by the agent, persistence mechanisms, or prompt injection attempts against the agent with harmful objectives.
Capability Assessment
Purpose & Capability
The skill's capabilities (search, tasks, comments, time tracking, docs) align with what a ClickUp MCP integration would need. However, the SKILL.md metadata declares a required binary (mcporter) and env var (CLICKUP_TOKEN) while the registry fields show no required bins or env — this metadata mismatch is an incoherence that should be clarified.
Instruction Scope
The instructions explicitly tell the operator to read ~/.claude/.credentials.json and extract a ClickUp access token using jq, then place that token into ~/.clawdbot/.env and into a local config (config/mcporter.json). Asking the agent (or user) to read another client's credential file and extract tokens is scope creep and a privacy/credential exposure risk; it goes beyond simply telling you how to call the ClickUp MCP API.
Install Mechanism
This is instruction-only (no install spec), which is lower risk than arbitrary downloads. That said, the skill depends on an external tool (mcporter) but provides no install guidance or provenance for that tool — the lack of an install spec plus reliance on mcporter is an operational gap the registry should document.
Credentials
Functionally it makes sense that a ClickUp integration needs a ClickUp token, but the SKILL.md requests a long‑lived token (stated ~10 years) and instructs extracting it from another application's credentials file. The registry does not declare CLICKUP_TOKEN as a required credential, increasing the inconsistency. Asking for tokens with such longevity and telling users to harvest them from other clients is disproportionate and risky.
Persistence & Privilege
The skill does not force permanent inclusion (always: false) and does not request elevated platform privileges. However, it instructs writing the token into ~/.clawdbot/.env and editing config/mcporter.json — modifying local config is expected for a connector, but combined with the token-extraction workflow it increases persistence of a sensitive credential and expands blast radius if the token is compromised.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install clickup-mcp
  3. After installation, invoke the skill by name or use /clickup-mcp
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - Official ClickUp MCP with OAuth workaround via Claude Code
Metadata
Slug clickup-mcp
Version 1.0.0
License
All-time Installs 22
Active Installs 21
Total Versions 1
Frequently Asked Questions

What is ClickUp MCP?

Manage ClickUp tasks, docs, time tracking, comments, chat, and search via official MCP. OAuth authentication required. It is an AI Agent Skill for Claude Code / OpenClaw, with 3834 downloads so far.

How do I install ClickUp MCP?

Run "/install clickup-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is ClickUp MCP free?

Yes, ClickUp MCP is completely free (open-source). You can download, install and use it at no cost.

Which platforms does ClickUp MCP support?

ClickUp MCP is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created ClickUp MCP?

It is built and maintained by pvoo (@pvoo); the current version is v1.0.0.

💬 Comments